InfoSecBulletin Cybersecurity for mankind
Five notable happenings today in the cyber world:
The NCSC-Switzerland said that the Play ransomware attack at Xplain impacted 65,000 important documents of the Federal Administration. The documents were from various administrative units, including the Federal Department of Justice and Police, the Federal Office of Justice, and the Federal Office of Police.
Daily Cyber security update for 24. 10. 2026
By infosecbulletin
/ Saturday , October 24 2026
Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...
Read More
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
By infosecbulletin
/ Friday , October 23 2026
The PHP security team shared ways to protect against a new flaw that lets someone run unwanted code on certain...
Read More
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
By infosecbulletin
/ Friday , October 23 2026
Major US banks have detected unauthorized access to customer accounts by third-party AI agents, with some systems taking actions beyond...
Read More
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
By infosecbulletin
/ Thursday , October 22 2026
Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated...
Read More
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
By infosecbulletin
/ Wednesday , October 21 2026
Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...
Read More
Update now! PHP2Shell: Critical PHP vulnerabilities patched
By infosecbulletin
/ Wednesday , October 21 2026
The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...
Read More
Trump says data centres should pay dividends to local community
By infosecbulletin
/ Wednesday , October 21 2026
US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...
Read More
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
By infosecbulletin
/ Tuesday , October 20 2026
Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...
Read More
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
By infosecbulletin
/ Tuesday , October 20 2026
The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...
Read More
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
By infosecbulletin
/ Monday , October 19 2026
NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...
Read More
The NSA and CISA issued five cybersecurity bulletins about securing data in the cloud. The recommendations cover implementing IAM solutions, encryption, and key management.
A report by FS-ISAC and Akamai showed that DDoS attacks on the financial sector increased by 154% in 2023 compared to 2022, mainly due to strong botnets and cyber hacktivist groups.
Tycoon and Storm-1575 threat actors carried out spear-phishing attacks on U.S. school districts in November 2023. They used Microsoft 365 credentials to bypass MFA protections.
The Rhysida ransomware group sold data stolen from Lurie Children’s Hospital for 60 bitcoins (approximately $3.4 million) on the dark web. The hospital is working on restoring the affected systems.
